UCF STIG Viewer Logo

The audit system must be configured to audit all discretionary access control permission modifications.


Overview

Finding ID Version Rule ID IA Controls Severity
V-819 GEN002820 SV-27309r1_rule ECAR-2 ECAR-3 ECAR-1 Medium
Description
If the system is not configured to audit certain activities and write them to an audit log, it is more difficult to detect and track system compromises and damages incurred during a system compromise.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-28437r1_chk )
Check the system's audit configuration.
# grep flags /etc/security/audit_control
Confirm flags fm or +fm and -fm are configured.
Fix Text (F-24552r1_fix)
Edit /etc/security/audit_control and add fm to the flags list.
Load the new audit configuration.
# auditconfig -conf